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Amdt. dated March 4, 2004 Serial No. 09/755,814 

Reply to Office action of 1 2/4/2003 Docket No. TUC920000052US 1 

Firm No. 0018.0084 

Amendments to the Specification 

Please substitute the paragraph on page 2 line 25 with the following rewritten paragraph: 
Still further, the first operation routine comprises a reboot routine and the second 
operation routine comprises an initialization routine, and the code images include a function 
routine to perform an operation after initialization^,]]. The function routine in one code image is 
executed and a third counter associated with the code image including the executed function 
routine is incremented if the function routine succeeded. The third counter is used, in addition to 
the first and second counters, to select one of the multiple copies of the code image to from the 
memory device to execute. 



Please substitute the paragraph on page 7 line 4 with the following rewritten paragraph: 
In preferred embodiments, the boot sector 12 uses the status bytes 28a, b to determine 
which code image 14a, b to select for the processor 4 to use to implement the embedded system 
2. The status bytes 28a, b are set by the boot sector 12, the device function 20a, b or other parts 
of the code image 14a, b using a rule based criteria to determine whether the code image is "bad" 
or "good" based on the counters 22a, b, 24a, b, 26a, b and status bytes 28a, b. In preferred 
embodiments, a code image is deemed "good" according to the rule-based criteria if the code 
image 14a, b has rebooted, initialized and successfully performed functions a threshold number 
of times thereby indicating that the code image Ma^b works for its intended purpose. A code 
image 14a, b is deemed "bad" if the code image is rebooted a sufficient number of times without 
initializing or initialized a sufficient number of times without successfully performing one or 
more device specific functions, thereby indicating that the code image 14a, b is not successfully 
performing initialization or device specific functions. 

Please substitute the paragraph on page 9 line 4 with the following rew ritten paragraph: 

FIG. 3 illustrates logic implemented in the initialization routine 18a, b that the processor 
4 executes at block 150 after the reboot of the code image 14a, b is not deemed "bad". At block 
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1 52, the processor 14 4 executes the initialization routine 1 8a, b to initialize the embedded 
system 2. If (at block 154) the status byte 28a, b is "good" then control ends with the code image 
14a, b initialized and waiting to receive commands to perform device specific operations. If (at 
block 154) the status byte 28a, b is not "good", then the status byte 28a, b must be "undefined" 
because the initialization routine 18a, b would not have been called if the status byte 28a, b was 
"bad" at block 122 of FIG. 2. If (at block 154) the status byte 28a, b is not "good" and the 
initialization routine succeeded (at block 156), then the processor 4 increments (at block 158) the 
initialization counter 24a, b and the initialization routine ends with the embedded system 2 
initialized and ready to perform device specific functions. If (at block 156) the initialization 
routine 18a, b did not succeed, then a reboot is initiated (at block 160) and control returns to 
block 100 in FIG. 2. 

Please substitute the Abstract on page 27, with the following rewritten paragraph: 
Provided is a method, system, and program for meth o d, system, and program for selecting 
a code image to execute. Multiple copies of a code image are maintained in a non-volatile 
memory device. A first operation routine is executed. A first counter is incremented if the first 
operation routine succeeds. A second operation routine is executed and a second counter is 
incremented if the second operation routine succeeds. The first and second counters are used to 
select one of the code images from the memory device to execute. 
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